Re: [security-services] Just noticed Errata 26 changes were incomplete.

["Cantor, Scott" <cantor.2@osu.edu>]

On 8/1/13 12:59 PM, "Philpott, Robert" <robert.philpott@rsa.com> wrote:

>However, it appears that that change now conflicts with section 4.1.3.5
>(Identity
> Provider Issues <Response> to Service Provider) which states: ³The
><Assertion> 
>element(s) in the <Response>  MUST be signed, if the HTTP POST binding is
>used, and MAY be signed if the HTTP Artifact binding is used.²
> 
>Am I missing something?

Looks like the other mention was missed.

-- Scott